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The main purpose of these notes is to prove, in a reasonably self-contained 
way, that finiteness of the Tate-Shafarevich group implies the parity conjec- 
ture for elliptic curves over number fields. Along the way, we review local 
and global root numbers of elliptic curves and their classification, and we 
end by discussing some peculiar consequences of the parity conjecture. 

Essentially nothing here is new, and the notes follow closely the papers 
|llj-|17j. all joint with Vladimir Dokchitser. There are only some additional 
shortcuts replacing a few technical computations of root numbers and Tam- 
agawa numbers by a 'deforming to totally real fields' argument. Also, this is 
not meant to be a complete survey of results on the parity conjecture, and 
many important results, especially those concerning Selmer groups, are not 
mentioned. 
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1. BiRCH-SwINNERTON-DyER AND PARITY 

1.1. Conjectures and the main result. Throughout the notes denotes 
a number field. Suppose E/K is an elliptic curve, say in Weierstrass form, 

= + ax + h, a,b G K. 

The set E{K) of i^'-rational solutions {x, y) to this equation together with 
a point at infinity O forms an abelian group, which is finitely generated by 
famous theorems of Mordell and Weil. The primary arithmetic invariant of 
E/K is its rank: 

Definition. The Mordell-Weil rank ikE/K is the 'L-Tsi\k of £'(i^')/torsion. 

The celebrated conjecture of Birch and Swinnerton-Dyer relates it to an- 
other fundamental invariant, the L-function L{E/K,s). We define it in ^ 
together with its conductor N G Z and the global root number w{E / K) = ±1. 
For now it suffices to say that L{E/K, s) is given by a Dirichlet series, 

oo 

L{E/K,s) = Y,ann-' 

n=l 

with On G and it converges for Res > 3/2. 

Hasse-Weil Conjecture. The function L{E/K, s) has an analytic contin- 
uation to the whole of C. The completed L-function 

L*{E/K, s) = r{^fT{S±^yTT-'^'N'/'^L{E/K, s) {d = [K : Q]) 

satisEes a functional equation 

L*{E/K,2-s) =w{E/K)L*{E/K,s). 

Granting the analytic continuation, we may state 

Birch-Swinnerton-Dyer Conjecture I. 

ord,=i L{E/K, s) = ik E/K. 

This remarkable conjecture relates arithmetic properties of E to ana- 
lytic properties of its L-function. It was originally stated over the ratio- 
nals, extended to all abelian varieties over global fields by Tate and vastly 
generalised by Deligne, Gross, Beilinson, Bloch and Kato. One immediate 
consequence of the two conjectures above is 

Parity Conjecture, {-ly^^/^ = w{E/K). 

In particular, an elliptic curve whose root number is —1 must have in- 
finitely many rational points. This is a purely arithmetic statement which 
does not involve L-functions and it might appear to be simpler than the 
two conjectures above. However, it is remarkably hard, and we have no 
approach to resolve it in any kind of generality. It has several important 
consequences: for instance, it settles Hilbert's 10th problem over rings of 
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integers of arbitrary number fields [36] and implies most remaining cases of 
the congruent number problem. 

The difficulty is that we know virtually nothing about the rank of a gen- 
eral elliptic curve, as it is very hard to distinguish rational points from the 
elements of III: 

Definition. The Tate-Shafarevich group of E/K is defined by 

V 

The famous Shafarevich-Tate conjecture asserts that Illg/;^ is finite. The 
main result result of these notes is that its finiteness does imply the parity 
conjecture. (Over function fields, Artin and Tate [58j showed that the full 
Birch-Swinnerton-Dyer conjecture follows from finiteness of III.) 

We write E[ri\ for the n-torsion in E{K), and K{E[n]) for the field ob- 
tained by adjoining to K the coordinates of points in E[n]. 

Theorem A. Let E be an elliptic curve over a number field K , and suppose 
that ^E/K{E[2]) has finite 2- and 3-primary parts. Then 

The problem that finiteness of III implies parity has a reasonably long 
history. It was solved for elliptic curves over Q with j-invariant or 1728 
by Birch and Stephens [3], for CM elliptic curves over Q by Greenberg 
|24j and Guo [2^, all (modular) elliptic curves over Q by Monsky [39j and 
most modular elliptic curves over totally real fields by Nekovaf |41j . Over 
arbitrary number fields the theorem above is proved in [12] for elliptic curves 
with 'decent' reduction types at 2 and 3, and for all elliptic curves in |16j . 



1.2. Birch Swinnerton-Dyer II and isogeny invariance. To explain 
our approach to the parity conjecture, we need to state the second part of 
the Birch-Swinnerton-Dyer conjecture. 

Notation 1.1. Denote the discriminant of K by A^^. For an elliptic curve 
E/K write E{K)tors for the torsion subgroup of E{K) and 

for the regulator of E/K; here {Pi} is any basis of E{K)/E{K)toTs and (, ) 
the Neron-Tate height pairing over K. 

Finally, we define the product C^/k of Tamagawa numbers and periods. 
Fix an invariant differential uj on E, and let oj° denote the Neron differential 
at a finite place v oi K. Set 

Ce/k = IIc,^^ H I \u;\ ■ j cjAu;, 



v\oo 



with Cv the local Tamagawa number at v and | • |^ the nomalised abso- 
lute value on Ky. We sometimes denote the individual terms of Ce/k by 
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C{E/K^,Lj), so that Ce/k = Y\v^i-^ / ^-ti^^)- "^^^ terms depend on the 
choice of uj but their product does not: replacing oj by auj with a & 
changes it by |a|„, which is 1 by the product formula. 

Birch Swinnerton-Dyer Conjecture II. The Tate-Shafarevich group 
^E/K is Enite, and the leading coefRcient of L(E/K, s) at s = 1 is 

I'ii^E/Kl'ReSE/K Ce/k 

, — =-odUe/k- 

|ii;(i^)torsPvlA^ 

Over general number fields, the only thing known about J^SDe/k is that 
it is an isogeny invariant, which is a theorem of Cassels If : S — )• £" is 
an isogeny over K, then L{E/K, s) = L{E' /K, s) {(p induces an isomorphism 
Vi{E) — )• Vi{E'), and the L-function is defined in terms of VJ), so in effect 
this means that BSD II is compatible with isogenies. Actually, because 
isogenous curves have the same rank {(f) induces E{K) (g) Q = E'{K) ® Q), 
so is BSD I as well. We will need a slight generalisation of Cassels' theorem, 
which relies on isogeny invariance of BSD II for general abelian varieties: 

Lemma 1.2. Suppose Ki are number fields, Ei/Ki are elliptic curves and 
Ui are integers. If fl- L{Ei/ Ki, s)""' = 1 and all U1e /k o,''"^ finite, then 
n.BSD^^/^^"« = l. 

Proof. Taking the terms with nj < to the other side (and renaming the 
curves and fields if necessary), rewrite the assumed identity of L-functions 

l[L{Ei/Ki,s) = l[L{E'j/K'^,s). 

i j 

Let ^ = Hi I^^Sj^./Q Ei and A' = Y\j Res^'./Q Ej be the products of Weil 
restrictions of the curves to Q. These are abelian varieties with L(A/Q, s) = 
L(A' /Q, s), so A and A' have isomorphic ^-adic representations (Serre [52] 
§2.5 Rmk. (3)), and are therefore isogenous (Faltings [H]). Their Ill's are 
assumed to be finite and BSD-quotients are invariant under Weil restriction 
(Milne [37] §1) and isogeny (Tate-Milne [38j Thm. 7.3). This proves the 
claim. □ 

1.3. Parity example. Why is this relevant to the parity conjecture, which 
concerns only the first part of BSD? Assume for the moment finiteness of 
III, and consider the following example. The two elliptic curves over Q 

E: y"^ +y = x^ + x'^ -7x + 5 As = -7 -13 (9161) 

E' : y'^ +y = x^ + x'^ + 13x + i2 Ae' = -7^ ■ 13^ (9162) 

are isogenous via a 3-isogeny (j) : E ^ E' defined over Q. Choose u^u' (= 
2y^i ) to be the global minimal differentials, so Cp = Cp for all p. The curves 
E, E' have split multiplicative reduction at 7 at 13, and their local Tamagawa 
numbers and the infinite periods Coo = C(£'/IR,a;), c'^ = C{E' /]R.,uj') are 

C7 = V7{Ae) = 1, ci3 = vi3{Ae) = 1; Coo = 6.039... 
4 = V7{Ae') = 3, c'lg = vi3{Ae') = 1; c'^ = 2.013... 
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In fact, Coo = 3c'oo (see the computation below for general isogenous curves). 
Now BSD£;/Q = BSD£;//Q by Cassels' theorem, but 



Ce/Q — 1 • 3 • Coo — Coo 

Cpi in = 3 • 3 • oCoo = 3co 



not equal, 



'E' IQ — o • O • 3 Coo 

SO some other terms in the Birch-Swinnerton-Dyer constant for E and E' 
must be unequal as well. Because the two are off by a rational non-square 
factor, and the conjectural orders of III (as well as of (torsion)^) are squares, 
the regulators must be unequal! In other words. 



^^gg/Q ^ Ce'/Q _ \^E'/q>\ _ |-g(vjtors| = 3 . □ . □ 1 
'^^^E'/Q ^E/Q IUIe/qI |-E''(Q)tors| 

If now rkiiJ/Q were 0, then so would be rk£"/Q and we would have 

'^^^E/n = Reg£;//Q = 1, 



contradicting the above. So, assuming finiteness of III, we proved that 
has positive rank. In fact, E/Q_ has odd rank: 

Lemma 1.3. Let (j) : E/K — t- E' /K he a K-rational isogeny of degree d. 
Then 



^^&E/K 



^kE/K _ (^j-fiiional square). 



Regij///^ 

Proof. Write n = ikE/K = ikE' /K, and pick a basis 

A := E(K)/torsion = (Pi, A' := E' {K) / torsion. 

Write (j)^ : E' ^ E for the dual isogeny, so that = [d]. Then 
d"" RegE/K = det{dPi,Pj) = det{4>'(l)Pi, Pj) 



det{<pPi, cl)P,) = Reg^,/^ -[A' : ^{A)] 



2 



□ 



Returning to our example, we proved that 

3 • □ = ^'^^/^ = y^^/^ • □, 

Regs'/Q 

so the rank is odd. Because w(£'/Q) = (—1)'^ = —1 (2 split places + 1 
infinite; see we showed that 

Finiteness of III =^ Parity Conjecture 

for the curve E = 9161/Q. 

This is the main idea behind the proof of Theorem |S1 in general. We 
will use equalities of L-functions to deduce relations between rank parities 
and the C's, and then verify by means of local computations that the latter 
agree with the required root numbers. 
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2. The ^-parity conjecture 

To prove Theorem [XI along the way we will also need slightly finer state- 
ments that give unconditional results for the Selmer ranks of E/K. 

Recall that III is an abelian torsion group, and for every prime p its p- 
primary part can be written as 

^e/k[p°°] — {Qp/'^pY^ X (finite p-group of square order). 

Definition. With 5p as above, the p-infinity Selmer rank of E/K is 

rkpE/K = rkE/K + 6p. 

If III is finite as expected, then 5p = and rkp = rk for all p. But the point 
is that we can often say something about rkp without assuming finiteness 
of III. In particular, the following version of the parity conjecture is often 
accessible: 

p-Parity Conjecture. (-iy^p^/^< = w{E/K). 

This conjecture is known over Q ([39l HU |28l [12]) and for 'most' elliptic 
curves over totally real fields [42 ^ 1161 143] : see Theorem 14.41 below. 

Remark 2.1. It is more conventional to define rkp as follows. Let 

Xp{E/K) = Hom,^(lii^SeV(^/i^),Qp/Zp) 

n 

be the Pontryagin dual of the p°°-Selmer group of E/K. This is a finitely 
generated Zp-module, and 

Xp{E/K) = Xp{E/K) % 

is a Qp-vector space, whose dimension is precisely rkp. Both Xp and Xp are 
(contravariantly) functorial in E and they behave well under field extensions. 
Specifically, if F/K is a finite Galois extension, its Galois group acts on 
Xp{E/F), and there is a canonical isomorphism of the Galois invariants 
with Xp{E/K), 

(2.2) M^/K) = Xp{E/Ff''^^^'^\ 

(The proof is a simple inflation-restriction argument, see e.g. |12j Lemma 
4.14.). For p\[F : K] this is even true on the level of Xp. Because the same 
Galois invariance holds for E{K) ®% Qp C Xp{E/K\ we get the following 
corollary (which can also be proved directly). 

Corollary 2.3. Suppose F/K is a finite extension of number fields, and 
E/K is an elliptic curve. IfUI^/p is finite, then so is U1e/k- 

Remark 2.4. The definitions above and Corollary 12.31 apply also to abelian 
varieties in place of elliptic curves. 
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2.1. Proof of Theorem [A]. To establish Theorem El we will need to prove 
the 2-parity conjecture for elliptic curves with a JC-rational 2-torsion point 
and a special case of the 3-parity conjecture: 

Theorem 2.5 (=Theorem 15. ip . Let K be a number field, and E/K an 
elliptic curve with a K -rational 2-torsion point O ^ P ^ E{K)[1\. Then 



(_l)rk2S/i^ = C^'/K = w{E/K), 

where E' = £'/{0,P} is the 2-isogenous curve. 

Theorem 2.6. Let F/K be an S^-extension of number fields, and let M 
and L be intermediate fields of degree 2 and 3 over K, respectively. For 
every elliptic curve E over K , 

^_^y^.,E/K+.^.,E/M+r^.,E/L^^_-^^ ■■^c^J^^c^ = w{E / K)w{E / M)w{E / L) . 

These two parity statements are sufficient to deduce Theorem lAl 

Proof of Theorem\M Take F = K{E[2]), so Gal{F/K) C GL2(F2) = 53. 
By Corollarv l2.31 the 2- and 3-primary parts of III^/^ are finite for K CkcF. 

If E has a iC-rational 2-torsion point, the result follows from Theorem l2.51 
If F/K is cubic, then rkS/ET and ikE/F have the same parity, because 
E{F) (8>Q is a rational Gal(-F/i^) = Cs-representation, so its dimension has 
the same parity as that of its Cs-invariants. Also, w{E/K) = w{E/F) (see 
[3T] p. 167, or prove this directly using the results of ^J3l), so the result again 
follows. 

We are left with the case when Gal(F/i^) = 5*3. Let M be the quadratic 
extension of in F and L one of the cubic ones. By the above argument, 

vkE/M even <^ w{E/M) = 1, 
rkE/L even <^ w{E/L) = 1. 

On the other hand, by Theorem 12.61 

rkS//i:+rk^/M+rk£;/L is even w{E/K)w{E/M)w{E/L) = 1, 

and Theorem |A] is proved. □ 

2.2. Local formulae for the Selmer parity. There are two totally dif- 
ferent steps in proving Theorems 12.51 and 12.61 one global and one local. The 
first one is to relate the Selmer parity to the products of periods and Tam- 
agawa numbers (the first equality in the two theorems), and the second one 
is a local computation comparing the latter to root numbers (the second 
equality) . 

The first one is in the spirit of the example in §1.31 Recall that there we 
had two elliptic curves over Q and an equality of L-functions, 

L{E/q,s) = L{E'/q,s), 
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that originated from an isogeny E ^ E' , say of degree d. Assuming finite- 
ness of UI, it implies an equality of the Birch-Swinnerton-Dyer quotients 
BSD£;/Q = BSD£;//(Q, which reads modulo squares 

Reg^VQ ^ Cg^ modQx2. 

The 'lattice index' argument (Lemma I1.3P shows that the left-hand side is 
the same as (P^^^^ modulo squares. So we have an expression for the parity 
of ikE/Q, which is a difficult global invariant in terms of easy local data. 
This is an absolutely crucial step in all parity-related proofs. In can be 
made slightly finer, without assuming finiteness of UI, but at the expense of 
working with Selmer groups. The precise statement is as follows: 

Notation 2.7. For an isogeny (j) : A ^ A' of abelian varieties over K we 
write 0* : {A'Y — >■ A* for the dual isogeny. For a prime p write 

(^p : MA'/K) ^ MA/K) 

for the induced map on the dual Selmer groups, and 

: A{K,) ^ A'{K,) 

for the map on local points. We let x(") '■= I ker(-)|/| coker(-)|. 

Theorem 2.8. Let (p : A ^ A' be a non-zero isogeny of abelian varieties 
defined over a number field K . For every prime p, 

X{(t>p) + fT^ \ ^ f ^^/K 
—— = p-part of I I x{(Pp,v) = p-part of — . 

The proof is an application of Poutou-Tate duality (see e.g. [I2] §4.1). 
For example, if </) : £^ — >• is an isogeny of elliptic curves of prime degree p, 
then 

^ = ^ = x(0*)Xp(<^p) = =/'^''^/^ (mod 

which is a formula of Cassels (see Birch |2j or Fisher [20] ) . This extends the 
argument of ^1.3l and in particular Lemma [1.31 to an unconditional statement 
for Selmer groups, and proves the first equality of Theorem 12.51 (with p = 2). 

2.3. Parity in S's-extensions. We now proved the first 'global' step of 
theorem 12.51 Now we do the same for Theorem 12.61 in other words we claim 
the followinen 



^ This is [12j Thm. 4.11 with p — S. Note that the contributions from v\oo to 



C e/fCe/k j,a,ncel when usine the same /('-rational uj over each field. The definition 

E/M^E/L 



of C in 12 excludes infinite places, so the formula there does not need the ^^^^a term, 

^E/L 

as it is then a rational square 
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Theorem 2.9. LetF/K be an S^-extension of number fields, M and L inter- 
mediate fields of degree 2 and 3 over K , and E/K an elliptic curve. Then 

rkg E/K + rkg E/M + rkg ElL = ords mod 2. 

As it was done in ^1.3l for the isogeny case, we start with a slightly simpler 
version first, assuming finiteness of III. Again, we will use a relation between 
L-functions, but this time it is one of a different nature. 

Thus, suppose G = Gal{F/K) = Ss and M and L are as in the theorem. 
Let E/K be an elliptic curve for which JH^/p is finite. By Corollarv 12. 3^ 
HIe/Ki ^e/m ^-nd U1e/l ai'e finite as well. 

The group ^3 has 3 irreducible representations, namely 1 (trivial), e (sign) 
and a 2-dimensional representation p, all defined over Q. The list of sub- 
groups of 53 up to conjugacy is 

n = {1,02,03,83}, 

and they correspond by Galois theory to F, L, M and K respectively. Each 
H ^% gives rise to a representation <C.[0/H] of G, associated to the G-action 
on the left cosets of H in G. Because there are four subgroups and only three 
irreducible representations, there is a relation between these. Writing out 

C[G]^l®e® p® p, C[G/C3]^lee and C[G/02\ = l®p, 

we find that the (unique such) relation is 

(2.10) c[53] e c[53/53]®' = c[S3/C3] e €[83/02]®^ 

Now tensor this relation with the /-adic representation Vi{E/ K)c = Vi{E / K)(S>Qi 
C (embedding Q; C in some way) . By the Artin formalism for L-functions 
(see for every H eH, 

L{Vi{E/K)c ® C[G/H],s) = L{E/F'', s), 

so we have a relation between L-function^, 

L{E/F, s)L{E/K, sf = L{E/M, s)L{E/L, sf. 

Applying Lemma 11.21 we get a relation between the regulators and the 
products of periods and Tamagawa numbers, 

(2.11) 

How do we interpret the left-hand side, and why is it even a rational number? 
Tensor the Mordell-Weil group E{F) with Q and decompose it as a G- 
representation, 

V = E{F) Q ^ 1®" e e®'' e p®". 

The elliptic curve has nothing to do with this; this relation already exists on the level of 
Dededind zeta-functions of the number fields. This forces relations between the regulators 
and class groups of number fields, and they have been studied by Brauer, Kuroda, de Smit 
and others (see e.g. [l] for references). 



NOTES ON THE PARITY CONJECTURE 11 

Next, compute the ranks of E over the intermediate fields of F/K in terms 
of a, b and c: using Frobenius reciprocity, for a subgroup H of S3 we have 

/ a, H = S3. 

rkE/F" = dimV'' = {l,V\H)H = {C[G/H],V)G = \ 2 = § 

I a + b + 2c, H = {1}. 

So, let Pi, Pa be a basis of E{K)(i<)Q (the 'trivial' part), and complement 
it to a basis of E{M) ® Q with Qi, ...,Qb (the 'sign' part) and to a basis 
of E{L) (8) Q with Pi, Re- By clearing the denominators, we may assume 
that the P's, Q's and P's are actual points in E{F). If 5 E Gal(P/i^) is an 
element of order 3, then 

E{F) ® Q = (Pi, Pa, Qi..., Qb, Pi, .., Pc, P?, .., P?), 

in other words these points form a basis of a subgroup of E{F) of finite index. 
Now we can compute all the regulators. Consider the three determinants 

P = det((Pi,P,», Q = det((Qi, Qj)i.), and P = det((Pi, Pj)i.), 

where (, )i? is the Neron-Tate height pairing for E/F. Recall that the pairing 
is normalised in such a way that it changes if computed over a different field 
by the degree of the field extension. For instance, 

{Pi,P,)K = \{PuPj)F, 

SO ^egE/K is (|)" • P • where □ is the inverse square of the index of the 
lattice spanned by the Pi in E{K). As we are only interested in regulators 
modulo squares, we may ignore this. Similarly, 

Reg^/M = {\t^'VQ ■ □ and Reg^/^ = {^r+'VU ■ □, 

because all {Pi, Qj)F and {Pi, Rj) f are 0, so both regulators are really prod- 
ucts of two determinants. (The height pairing is Galois-invariant, so dif- 
ferent isotypical components are always orthogonal to each other with re- 
spect to it.) Finally, using Galois invariance again, together with the fact 

that Ri + Rf + Rf is iSs-invariant and so orthogonal to Rj, we find that 
{Ri,RpF = -\{Ri,Rj)F, so 

YiegE/F = P • Q • det (_ 1^ 'Y) . □ = P . Q . S^P^ . 
where A is the matrix {{Ri, Rj))ij. Combining the four regulators yields 

RegE/pRegl/j^ ^ 3"PQP^ • (6"P)^ _ 
Reg^/^Regl/^ - S^+^-PQ • (2-+-PP)2 - 

^ ^a+{a+b)+{a+c) 

^ ykE/K+rkE/M+rkE/L ^^^^ qx2 ^ 

Together with (|2.1ip this proves Theorem 12.9^ assuming finiteness of III. 
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2.4. Brauer relations and regulator constants. The results of §2.3l gen- 
eralise to arbitrary Galois groups as follows (see [I2l [I4j for details) . 

Definition 2.12. Let G be a finite group, and write % for the set of repre- 
sentatives of subgroups of G up to conjugacy. A formal linear combination 

— 

is a Brauer relation if ©jC[G/-frj]®"' = as a virtual representation, i.e. if 
the character n, Ind^. 1//. is zero. 

Example 2.13. The dihedral group G = D2p for an odd prime p has a 
relation 

e = {1} - 2G2 -Gp + 2G, 
the only one in G up to multiples. For p = 3 this is the relation (|2.10p . 

If G = Gal{F/K) is a Galois group and E/K is an elliptic curve, every 
Brauer relation = X] ^^^^^^ in G gives an identity of L-functions 

Yl L{E/Mi, s)"' = 1 {Mi = F^^), 

i 

and so a relation like (|2.1ip between regulators and Tamagawa numbers, 
assuming that is finite. As in the case G = ^3, the left-hand side 

Yl - Reg^/ j^f. depends only on E{F) (gi Q as a G-representation: 

Theorem 2.14. Let G be a finite group and © = ^ niHi a Brauer relation 
in G. Suppose V is a Q^G -representation and (,) : V x V ^ is a non- 
degenerate bilinear G-invariant pairing. Then 

Ce{V) :=ndet(^(,)K^r^ 

i 

is a well-defined number in Q^/Q^^, and it is independent of the choice of 
the pairing {,). 

The notation det(|^(,) | V^^) means the following: pick a basis {Pj} 

of the invariant subspace V^^ and compute the determinant of the matrix 
whose entries are j^{Pj, P^). Up to rational squares, this is independent 

on the basis choice and the total product is well-defined in M^/Q^^. The 
theorem asserts that it is in fact in Q^/Q^^, and independent of (,). 

Remark 2.15. The theorem also holds with Q replaced by any other field 
k where |G| is invertible, y by a self-dual A;G-representation and M by any 
field containing k. 

The proof of the theorem is reasonably straightforward (see [12j §2 or 
|14j §2.ii), in the spirit of what we did in ^2. 3 1 explicitly for G = 53. An imme- 
diate consequence is that if pi,...,pi^ are all irreducible QG-representations, 



'It exists for every such V, as every rational representation is self-dual 
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then the numbers Cs{pi), ...,CQ{pk), cahed regulator constants, determine 
everything. In other words, if we decompose V = Q Pj®""^ , then 

CeiV) = llCeip,r\ 

j 

as we can obviously pick a 'diagonal' pairing on V which respects the de- 
composition. 

Example 2.16. For G = ^3 and 6 = {1} - 2C2 - C3 + 2 S'3, we have 

C©(1) = Ce(e) = Ceip) = 3 G Q^/Q^'- 
(For example, if we choose the obvious trivial pairing on 1, then 

Ce(l) = 1 • (i)-' • ilr' ■ ilf ^ 3 mod QVQ"', 
and similarly for e and p.) 

Corollary 2.17. Suppose E/K is an elliptic curve, F/K a Galois extension 
with Galois group G and = niHi a Brauer relation in G. Decompose 
E{F) (8) Q = ® Pfe into irreducible G -representations. Then 

i k 

Proof. Take V = E{F)f^Q and (, ) the Neron-Tate height pairing on V. □ 

For G = S3, together with ()2.1ip this corollary reproves Theorem l2.91 still 
assuming that Ul£;/p is finite. 

Finally, we discuss the modification necessary to turn this into an uncon- 
ditional statement about Selmer ranks. Suppose E/K is an elliptic curve, 
Gal{F/K) = G as before and p is a prime. The dual Selmer Xp{E/F) 
(cf. Remark 12. ip is a QpG-representation which now plays a role analogous 
to the QG-representation E{F) O Q. 

Theorem 2.18. 

(1) X = Xp{E/F) is a self-dual <QpG -representation. In other words, it 
possesses a G-invariant (Jp-valued non- degenerate bilinear pairing. 

(2) For any such pairing {, ) and a Brauer relation @ = Yl ''^iHi in G, 
we have 

ordp(ndet(^(,) I ;f^»)"') = ordp[]G^/^H,"' mod 2. 

i i 

For the proof see [13]. In fact, for an explicit group such as G = 5*3 it is 
possible to give a direct proof of this, by constructing an isogeny between 
the products of the relevant Weil restrictions and applying Theorem 1 2. 8 j this 
is how it is done in [12] Thm. 4.11 (with p = 3). Note that when G = S3, 
every G-representation is rational, so (1) is automatic. 

As a corollary, we get Theorem 12.91 (Decompose X3[E/F) into Q^pS^- 
irreducibles and apply the theorem above.) So we have proved the first 
equalities in Theorems 12.51 and 12.61 and it remains to prove the second ones. 
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For that we need to look carefully at the root numbers of elliptic curves and 
carry out the local computations relating them to Tamagawa numbers. 

2.5. Parity in dihedral extensions. The S'3-example generalises to di- 
hedral groups. Suppose G = Gal{F/K) = D2p, with p an odd prime, and 
recall from Example 12.131 that G has a unique Brauer relation 

e= {1} -2G2-Gp + 2G. 

Let M and L be the unique quadratic and one of the degree p extensions 
of K in F, respectively. Apply Theorem 12.181 and interpret the left-hand 
side using regulator constants (using Theorem 12.141 and Remark 12.151 with 
k = Qp). Take any elliptic curve E/K, and decompose 

where 1 (trivial), e (sign) and p {p — 1-dimensional) are the distinct QpG- 
irreducible representations; the latter decomposes over Qp as a sum of 2- 
dimensionals, 

p(g)Qp = n e • • • e rp-i . 

2 

The regulator constants of 1, e and p are easily seen to be p (as in the case 
G = 5*3), and Theorem 12.181 gives the following parity statement: 

ni + He + Up = ordp — — mod 2. 

Ge/mGj^/^ 

This can also be written as 

(1 + e + n, Xp{E/F)) = ordp ^^/^^^/^ mod 2 Vi, 

^e/m'-^e/l 

where (, ) stands for the usual inner product of characters of representations. 
In other words, the relation gives a p-parity expression for 'the twist of E 
by 1 + e + Ti in terms of Tamagawa numbers and periods. 

Remark 2.19. For an alternative expression for exactly the same parity in 
terms of 'local constants', see Mazur and Rubin's papers [MlES]; the parity 
conjecture for these twists is now known for all elliptic curves over number 
fields and all odd see [121 HSj aiid de La Rochefoucauld ^47J . 

2.6. The Kramer- Tunnell theorem. We mentioned two types of rela- 
tions between L-functions of elliptic curves: one comes from a rational 
isogeny, and one from Brauer relations in Galois groups. There is a third 
example, which is classical: the relation for quadratic twists. 

Suppose M = K{\/]3) is a quadratic extension of number fields, E/K is 
an elliptic curve, and Ep/K is the quadratic twist of E by /3: 

E -.y^ = x^+ax+h, E^ : f3y'^ = x^ +ax+b = x^ + 0^ax+ ^H). 

The /-adic Tate modules of E and Ep are related by 

Ti{Ep) = Ti{E)®e, 
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with e : Gai{M / K) — )• {±1} the non-trivial character, and Artin formahsm 
of L-functions (see ^ apphed to Iiid[i^^||^|^^^^ 1 = 1 ® e yields a relation 

L{E/M, s) = L{E/K, s)L{Ep/K, s). 
If we assume that III^/jv/ is finite, Lemma 11.21 gives 

~ mod 



and it is easy to see that the left-hand side is 2'^'^'^^ (i.e. 2'^^/'^+'^'^f^/^) 
up to squares. In fact, the Weil restriction A = Res^//x E admits an isogeny 

(j) : A ^ E X Ep, 

such that = [2], and Theorem 12.81 produces an unconditional version: 

C-E/kC Ea/K 

(2.20) rk2 E/M = ords ''^ mod 2. 

^E/AI 

This was used by Kramer [30j and Kramer-Tunnell [S^ to prove the 2-parity 
conjecture for E/M, by comparing the right-hand side with the root number 
w{E/M) by a local computation: 

Theorem 2.21 (Kramer-Tunnell). Suppose the primes of additive reduction 
for E above 2 are unramified in M/K. Then the 2-parity conjecture holds 
for E/M: 

{-ly^^^l^'' = w{E/M). 

The restrictions on the reduction type can in fact be removed using the 
methods of ^5.71 We will not need this, so we refer the reader to pL6j ('proof 
of the Kramer-Tunnell conjecture'). 

3. L-FUNCTIONS AND ROOT NUMBERS 

To set up the notation, let X be a number field, and p a prime of K with 
completion Kp, residue field Fg of characteristic p and uniformiser tt. We 
write Gk for the absolute Galois group Gal{K /K) of K, and use a similar 
notation for other fields as well. For the most of this section we work in 
the local setting, and we begin by recalling the structure of the local Galois 
group at p. The reduction map on automorphisms puts Gk,, into an exact 
sequence 

i > Ip > LrKp > LrF, > i, 

which defines the inertia group Ip at p. An (arithmetic) Frobenius is any el- 
ement Frobp G whose reduction mod p is the map x i-^ x'^. If we choose 
an embedding K ^ Kp, then Gk^ ^ Gk via the restriction map, and we 
can consider Ip as a subgroup of Gk- Choosing a different embedding conju- 
gates Ip, so it is really only well-defined up to conjugation. Similarly, we can 
view Frobp as an element of Gk, but it is only defined up to conjugation, 
and only modulo inertia. 
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We will often use two standard characters that come the from identifica- 
tions GkJIp = U^^ and/p/i„-^i\t = n/^p^/- Fix a prime / f P- 

Definition 3.1. The (/-adic) cyclotomic character x '■ Gxp Zf is defined 
hy x{Ip) = 1 and x(Frobp) = q. Alternatively, it is the action of Gxp on the 
/-power roots of unity, 

X- — > lim AutW" = lim(Z/rZ)^ ^ Zf . 

n n 

(In this way it can be defined as a character of Gk-) 
Definition 3.2. The (/-adic) tame character (/> : Ip — )• is defined by 
</,(a) = (a(7rV'")/7ri/'") G lim /xp ^ Z;. 

n 

Recall that a G^^^ -module M is unramified if Ip acts trivially on M, and, 
similarly, a Gi^-module is unramified at p if Ip <Gk acts trivially on it. 

Example 3.3. The trivial character 1 and the cyclotomic character x both 
give Zi a structure of an unramified Gi^^ -module. 

3.1. L- functions. Let E/K be an elliptic curve. For every prime /, the 
Galois group Gk = Gal{K/K) acts on the sets E[r] = E{K)[r] of /"- 
torsion points of E for all n > 1. The fundamental arithmetic invariant of 
E/K is its I -adic Tate module, 

TiE= lim E[r], 

n 

the limit taken with respect to the multiplication by / maps i?[/""^"'^] — )■ i?[/"]. 
This is a free Z;-module of rank 2, and 

ViE = TiE Qi 

is a 2-dimensional Q^-vector space. By the non-degeneracy and the Galois 
equivariance of the Weil pairing on i?[/"], we have det ViE = x- The repre- 
sentation ViE (or sometimes its dual ViE*) is called the l-adic representation 
associated to E/K. For varying / these form a compatible system of l-adic 
representations, meaning that they satisfy two conditions: 

(1) All ViE are unramified at p for almost all primes p of 

(2) For such p, the characteristic polynomial of Frobenius Frobp on ViE 
is independent of / for p f /. 

To explain this, take a prime p of and any / \ q. The criterion of 
Neron-Ogg-Shafarevich ( |54] Ch. VII) asserts that 

ViE is unramified at p <;=^ E has good reduction at p. 
In particular, this happens for almost all primes p of K and this is indepen- 
dent of /. This is condition (1). 

Now, as Ip Gkp and ViE is a Ga'p -representation, the quotient Gxp/Ip 
acts on the inertia invariants (V^I?)^"', so we can talk of the action of Frobe- 
nius Frobp on (ViE)^''', and this is independent of the choice of Frobp. Its 
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characteristic polynomial does not change under conjugation, therefore it is 
completely choice- independent. So we may define the local polynomial at p, 

Fp(r) = det(l - Frobp-i T \ iViE*y^). 

(There are two technical points: we take the geometric Frobenius Frob|7^, 
the inverse of the arithmetic one, and we also compute the characteristic 
polynomial on the dual ViE*; both are just standard conventions, and are 
not too important.) As explained in [Mj Ch. V, 

E/Kp has good reduction =^ -^p(^) = 1 ~ o-pT + qT'^, 
with Op = q + l — \E{¥q)\. This polynomial has degree 2, since ViE = (VJi?)^'' 
in the good reduction case. Also, Fp(T) is in Z[T] rather than just Z/[T] 
and is independent of I. This is condition (2). 

Definition 3.4. The L-function of E/K is a function of complex variable s 
given by the Euler product 

L{E/K,s) = llFp{q-T' =lldet{l - qp'Fiohp' \ {ViE*Y^)-\ 
P P 

Here the two products run over all primes p of K, and q^ denotes the size of 
the residue field at p. (It follows from the Hasse-Weil bound that L(E/K, s) 
converges for Res > 3/2.) 

In the same way one associates an L-function to any compatible system 
P — {Pi)i of ^-adic representations. There are obvious notions of direct sums 
and induction for /-adic representations and it is not hard to verify that 
their L-functions satisfy the following: 

(i) If /9, p' are compatible systems of /-adic representations of Gk-, then 

L{p e p', s) = L{p, s)L{p', s). 

(ii) For p as above and a subfield F C K, 

These properties are known as the Artin formalism for L-functions. 

As for elliptic curves, we expect all L-functions of systems of /-adic repre- 
sentations to have meromorphic (and usually analytic) continuation to the 
whole of C, and to satisfy a functional equation relating the value at s to 
that at A; — s, where k £ Z is the weight of p. 

Remark 3.5. Most L-functions that we know of are supposed to arise from 
/-adic representations. For instance, if V/K is any non-singular projective 
variety and < i < 2dimy, the etale cohomology groups H^^(y,Qi) form 
a compatible system. Thus we can define the corresponding L-function 
L{H^(y), s), and it has weight k = i + 1. In this terminology, L{E/K, s) = 
L{H^{E/K),s). (This the reason for taking the dual ViE* instead of ViE 
in definition of L{E/K, s).) 

There is one subtle point though: for varieties other than curves and 
abelian varieties, it is not known that the polynomials Fp{T) are independent 
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of I when p is a prime of bad reduction. This is conjectured to be true, 
and this conjecture is imphcitly assumed when one speaks of L-functions of 
general varieties. 

Remark 3.6 (Conductors). Another arithmetic invariant that enters the 
functional equation of any L-function is its conductor A^. For an elliptic 
curve E/K, the conductor of L{E/K, s) is N = A'j^ Normx/Q{J\fE/K)- Here 
Ak is the discriminant of K, and Ne/k is conductor of E/K. It is an 
ideal in Ok (see [55]), and we interpret its norm to Q as a positive integer. 
It is this that enters the functional equation in §!.![ 

For elliptic curves, let us determine Fp{T) in all cases, and verify its 
independence of I expicitly. There are several cases: 

E/Kp has good reduction. As mentioned above, Fp{T) has degree 2, is in- 
dependent of I and is of the form 

Fp{T) = l-apT + qpT^. 

E/Kp has split multiplicative reduction. In this case, Tate's uniformization 
('theory of the Tate curve') asserts that there is a (p-adic analytic) isomor- 
phism of -modules 

E(K-p)^K-p''/a^ 

for some a G Kp with Vp{a) = —Vp{j{E)) > 0. Writing Qn G ATp^ for a 
primitive /"th root of unity, we get that in particular, 

E[n - (Cp,ai/'")c:^' 

as a Galois module. In this basis, the action of Galois on E[l^] is of the form 

with X the /-adic cyclotomic character and '*' restricting to the tame char- 
acter (p on Ip. Passing to the inverse limit TiE = lim£'[/'^] and tensoring 
with we find that the actions on ViE and ViE* are 

f ^' ;) 

respectively. The inertia Ip acts as (^'j') on ViE*, so is has a 1-dimensional 
invariant subspace, spanned by the second basis vector. Frobenius acts 
trivially on it, so 

Fp{T) = det(l - FVob"^ T \ {ViE*Y^) =l-T. 
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E/K^ has non-split multiplicative reduction. Let Kf{^/^) / be the unram- 
ified quadratic extension, and 

rj: Gk, ^ Gal(Kp(v^)/ifp) ^ {±1} 

the associated character of order 2. The quadratic twist of E has spht- 
multipUcative reduction and ViE = Vi{E^) ^r] as a, Galois module. In other 
words, acts oi^ViE* as 

x-\<y)ri{cj) \ 

Because /p acts in the same way as in the split multiplicative reduction 
case and r7(Frobp) = —1, we find that the inertia invariants are again 1- 
dimensional and 

Fp(r) = i + r. 

E/Kp has additive potentially multiplicative reduction. This is similar to 
the non-split multiplicative case, except that here K(^)/K is replaced by 
a ramified quadratic extension (namely, the smallest extension where E 
acquires split multiplicative reduction). Now Ip acts through ib(^ ^) on ViE* 
with non-trivial it, and has therefore trivial invariants. So 

Fp{T) = 1- 

E/Kp has additive potentially good reduction. As in the last case, we claim 
that {ViE*yf = and consequently 

F,{T) = 1. 

Recall that E acquires good reduction after a finite extension of Kp . By the 
Neron-Ogg-Shafarevich criterion, Ip acts on ViE non-trivially and through 
a finite quotient. If ViE had a 1-dimcnsional inertia invariant subspace, 
then Ip would act as *) in some basis. The bottom right corner is 1 as 
det ViE = X is unramified, and the top-right corner is then since an action 
of a finite group is diagonalizable. So Ip would act trivially, a contradiction. 
Therefore {ViE*yf =0, as asserted. 

3.2. Weil-Deligne representations. Whatever the reduction type of E/K^ 
is, note that Ip has an open (i.e. finite index) subgroup which acts unipo- 
tently on ViE, namely trivially in the potentially good case and as (^ f) m 
the potentially multiplicative case. 

Grothendieck's monodromy theorem asserts that for any non-singular pro- 
jective variety V and any i, the action of some open subgroup of Ip on 
p = if|^(y) is unipotent. It follows that it has the form 1 -|- ^A'^ for some 
fixed nilpotent endomorphism N of p. We are going to call such represen- 
tations Weil representations {N = 0) and Weil-Deligne representations (any 
A'^). There arc two technical points: one is that we fix some embedding 
Q; ^ C and make our representations complex instead of /-adic from this 
point onwards; another one is that to get rid of the dependence of the Z-adic 
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tame character (p of I, we just remember the nilpotent endomorphism N and 
how it commutes with the Galois group. 

Definition 3.7. A Weil representation over F of dimension n is a homomor- 
phism Gf ^ GL„(C) whose kernel contains a finite index open subgroup of 
the inertia group Ipjp- 

Definition 3.8. A Weil-Deligne representation over F is a Weil repre- 
sentation p : Gp ^ Ghn(y) together with a nilpotent endomorphism 
N G End(y) such that p{g)Np{g)-^ = x{g)N for all g G Gp- 

Example 3.9. If E/Kp is an elliptic curve, then ViE <^ C and (ViE*) (g) C 
have a natural structure of Weil-Deligne representations. They are Weil 
representations if and only if E has integral j-invariant (equivalently, E has 
potentially good reduction). 

3.3. Epsilon-factors. The current state of affairs is that we are very far 
from proving the Hasse-Weil conjecture for compatible systems of Z-adic rep- 
resentations or even for elliptic curves over number fields. Even for elliptic 
curves over Q the proof (via modularity) is rather roundabout. In some 
sense, the only well-understood situation is the 1-dimensional case, that of 
Hecke characters (a.k.a. 'Grossencharakteren'). Also well-understood are 
the signs in the conjectural functional equations for all L-functions. This is 
the theory of e-factors, which we now sketch. 

We will not need Hecke characters themselves, only their local compo- 
nents. Let p be a prime of K, and denote by F some finite extension of Kp. 

Definition 3.10. A quasi- character of Gp is a onc-dimcnsional Weil-Deligne 
(equivalently, Weil) representation. Alternatively, it is a homomorphism 

ijj : Gp C", 

which is continuous with respect to the profinite topology on G^;' and discrete 

topology on C^. 

In his thesis, Tate associated to a quasi-character its epsilon-factor e{ip) G 
C^, which enters the functional equation for the local L- function of ■0: 

Notation 3.11. Composing with the local reciprocity map F^ G'^, 
consider ijj also as a character F^ ^ C^. Define 

n^ip) = the conductor exponent of tp, 
h{F) = Vp{Ap/Qj, 

h = any elt. of F^ of valuation —n{il)) — b{F), e.g. iTp^^^^ '^(^) ^ 
f Iho'p i>{x~'^)e^'''^''"^^^''^dx for ^ ramified, 
1 IhO^ ip{h~^)dx = ^ J^x dx for ip unramified. 

The integrals are in effect finite sums (with the number of terms growing 
with the conductor of ^ and the ramification of F over Qp), so they can be 
explicitly computed for a given quasi-character. 
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Tate's theory of signs in the functional equations extends uniquely from 
quasi-characters to arbitrary Weil-Deligne representations 

/5:Gp^GL„(C), 

for all finite F/Kp, and all n: 

Theorem 3.12 (Langlands-Delignc [8j). There is a unique way to associate 
to each p its epsilon-factor e{p) G such that 

(1) (Multiplicativity.) e{pi © P2) = e{pi)e{p2)- 

(2) (Inductivity in degree 0.) If pi,p2 : Gp — > GL„(C) have the same 
degree, thei^ 

ejpi) ^ <^^^g7 
<P^) e(lndj:^^ ■ 

(3) (Quasi-characters.) For quasi-characters Tp : Gp — )• the e{ip) are 
as in \3.11\ 

(4) (Semi-simplification.) Writing p^'^ for the semi- simplification of p, 

. ) = det(-From(p-)^p) 
' det(-Frobp|p^O ■ 
Remark 3.13. Uniqueness follows from the 'Brauer induction' argument: 
every semisimple Weil-Deligne representation is a Z-linear combination of 
inductions of quasi-characters. Existence is harder: one has to understand 
'monomial relations' between inductions and use Stickelberger's theorem to 
prove that the e-factors satisfy those relations. 

Definition 3.14. Write sgn z = z/\z\ for the 'sign' of z G on the complex 
unit circle. The local root number of p is defined as 

w{p) = sgne(/9) = -44t- 

Example 3.15. For p = ip a 1-dimensional unramified quasi-character, 

w{'tp) = sgm/j{h~^) = sgn^(Frobp)'''''^^ 
In particular, the trivial representation has w{l) = 1. 

Example 3.16. Writing q for the size of the residue field of F, we find that 
the cyclotomic character also has 

w{x) = (sgng)- = 1. 

Because the e-factors are multiplicative in direct sums and inductive in 
degree 0, clearly so are the root numbers; similarly, 

sgn det(— Frobp | (pj-'f ) 
as well. Here are some additional properties that are not hard to deduce: 



equivalently, e{W) — e(IndM^) for any virtual representation W of degree 0. 
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Proposition 3.17 (Tate [61], Deligne [8]). 

• w{p(B p*) = (det/9)(— 1), i.e. the image of —1 under 

loc. recip. ^ detp ^ 

• 0/92) = .sgn(detp2)(vr^^'"^"^''^'^^'^™'") if P2 is un- 
ramified. 

3.4. Root numbers of elliptic curves. 

Definition 3.18. Let E/Kp be an elliptic curve. Define its local root number 

w{E/Kp) = wip); p = (ViE)* C. 

For elliptic curves (and, generally, for abelian varieties) this is known to 
be independent of I (with p \ I) and of the embedding Qi C, and it 
equals ±1. 

Definition 3.19. The global root number of an elliptic curve E defined 
over a number field K is the product of the local root numbers over all 
places of K, 

w{E/K)=l[wiE/K,). 

V 

The product is finite since w{E/Ky) = 1 for primes of good reduction (see 
below). Also, we let w{E/K^) = —1 for all Archimedean v. 

Example 3.20 (Good reduction). If E/Kp has good reduction, then p 
is unramified by the Neron-Ogg-Shafarevich criterion. Since det p is the 
cyclotomic character, 

w{E/Kp) = w{l ® p) = w{lf sgiidet p{-np) = sgn(g'") = +1. 

Example 3.21 (Split multiplicative reduction). If E/Kp has split multi- 
plicative reduction, then 

and det p = x ss> before. Applying the semi-simplification formula, we find 

,n( n\ - mi (^'^ ^g°d^t(-Frobp|(^„ ?) ) _ «g°dct (~'^„ ?) _ ^ _ ^ 

wyp) — wyy q ) sgndet(- Frobp |1) sgndet(l) _i ^■ 

Example 3.22 (Non-split multiplicative reduction). If E/Kp has non-split 
multiplicative reduction, the same computation shows that w{E/Kp) = +1. 

To compute the root numbers of elliptic curves in the additive reduction 
case one has to understand p well enough. One case when this works well 
is when E admits an isogeny, forcing the Galois action on ViE to be less 
complicated than in general: 
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3.5. Root numbers of elliptic curves with an l-isogeny. As before, 

let E/Kp be an elliptic curve, and suppose p \ I. Assume that there is a 
degree I isogeny defined over Kp, 

^•.E — >E'. 

Recall that (/> is a non-constant morphism of curves mapping O to O, and 
over Kp it is an i-to-1 map; such a map automatically preserves addition 
on E, and therefore maps E[l^] to and hence TiE to TiE' as well. 

Notation 3.23. Write ker(/> for the abelian group of points in the kernel 
of ^ in E{Kp)\ thus ker<^ = Ci as an abelian group. Write also 

F := iiTp (coordinates of points in kei^) C Kp{E[l]). 

The points in ker (f) are permuted by , so F/ Kp is a Galois extension. 
This also means that the action of on E[l] is reducible, that is of the 
form (o*)- The Galois group Gal(F/i^p) is the image of 

action on <- /* *\ top left corner ^ 
^Kf. > Uo Ji ^ ' 

SO it is cyclic of order dividing I — 1. 

Notation 3.24. Write {-1,F/Kp) for the Artin symbol 

, . , _ J +1, if —1 is a norm from F to Kp 
/ P''"!-!, otherwise. 

The Artin symbol is the main class-field-theoretic invariant for cyclic ex- 
tensions, and the local root number of an elliptic curve with an isogeny turns 
out to be closely related to it: 

Theorem 3.25. If E/Kp has additive reduction, p| I and I > 5, then 

wiE/Kp) = i-l,F/Kp). 

Proof. We leave the potentially multiplicative case to the reader, and do the 
(slightly more involved) case of potentially good reduction. 

Claim 1: E\l\ is unramified over F. Proof: Because det p = x Gp 
acts trivially on ker(/), the image of Gi? in Aut (£■[/]) = GL2(F/) is contained 
in (o^)- As X is unramified, the image / of inertia Ip is inside (q*)) so |/| 
divides /. But |I| divides 24 in the potentially good case, so / is trivial and 
E[l] is unramified over F. 

Claim 2: £"[1"] is unramified over F for all n > 1. Proof: The image /„ 
of Ip in GL2(Z/PZ) is of order dividing 24, as before. But the kernel of 
GL2(Z/PZ) — )• GL2(Z//Z) is of Z-power order, so this map is injective on 
In- But by step 1, the image is trivial, so /„ is trivial as well. 

Claim 3: E/F has good reduction. Proof: Neron-Ogg-Shafarcvich. 

Claim 4'- The action of Gk^ on ViE is abelian. Proof: We want to show 
that the commutator subgroup Gk^' acts trivially on ViE. Now, 

• Gxf,' ClKp as GkJIk^ = G&\{k/k) ^ Z is abelian. 
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• The image of Gxp' in Ga\{F / Kp) is trivial as Ga\{F / Kp) is abelian, 

so Gxp' C If- But Ip acts trivially on ViE by Claim 2, as asserted. 

Step 5. The local root number. A semisimple abelian action can be diag- 
onalised over C, so p = ^^-i) for some quasi-character ^p. Now we can 
compute 

w{p) = w{^p)w{x~^'^p) = w{ip)'w{ilj*) (unramified twist formula) 
= w{iIj ® t/)*) = tlj{-l) (/)©/>* formula) 

= ip{ — l) for any primitive character ip 

of Gal{F / Kp) that agrees 
with ^ on inertia 
= {—1,F/Kp). (local class field theory) 

□ 

Remark 3.26. The theorem illustrates the fact that when Gxp acts on 
ViE through an abelian quotient, we have enough formulae to determine 
the local root number. When the action is not abelian, the following result 
is very useful: 

Theorem 3.27 (Frohlich-Queyrut). Suppose F{'\/^)/F is quadratic exten- 
sion, and ip : Gpf^^-^ — )■ a quasi- character such that ip\px = 1. Then 

wii^)=i^{0 G {±1}. 

Via the induction formula, the theorem computes the local root number of 
the Galois representation w{lnd^p). This is a 2-dimensional representation 
which is not necessarily abelian, e.g. the Galois image may be dihedral or 
quaternion (it has a cyclic subgroup of index 2). This is enough to determine 
the local root numbers of all elliptic curves over fields of residue characteristic 
at least 5 (i.e. p f 2,3); see [i8] . 

In residue characteristics 2 and 3 the situation is a bit more complicated; 
see [26] for Qa and Q3, [32] for p|3 and [IB [65] for p|2, and also [l6] for a 
general root number formula; see also [48 ^ B9] for the root numbers of twists 
of elliptic curves. 

4. Parity over totally real fields 

We refer to Wintenberger [66] for the definition of modularity for elliptic 
curves over totally real fields. The two propositions below are essentially 
due to Taylor (see [62j proof of Thm. 2.4 and [63j proof of Cor. 2.2). 

Proposition 4.1. Let F/K he a cyclic extension of totally real fields, and 
E/K an elliptic curve. If E/F is modular, then so is E/K. 

Proof. Let vr be the cuspidal automorphic representation associated to E/F. 
Pick a generator a of Gal{F/K). Then vr*^ = vr and therefore by Langlands' 
base change theorem vr descends to a cuspidal automorphic representation 
n over K. Associated to 11 there is a compatible system of A-adic repre- 
sentations /On, A) with A varying over the primes of some number field k (see 
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|66j ) ■ Fix a prime A of k, let / be the rational prime below it and write 
Vi{E/F) for the Tate module of E/F tensored with Q^. The restriction of 
P = Pu,x to Gal{F/F) agrees with V = Vi{E/F) (8)Q; kx. Because E cannot 
have complex multiplication over F (it is totally real), Vi{E/F) is abso- 
lutely irreducible, and therefore the only representations that restrict to V 
are W = Vi{E/K) (g)Q; kx and its twists by characters of Gal{F/K). Hence 
p and W differ by a 1-dimensional twist, whence W is also automorphic and 
E/K is modular. □ 

Proposition 4.2. Let E be an elliptic curve over a totally real field K, and 
p a prime number. If the p-parity conjecture for E is true over every totally 
real extension of K where E is modular, then it is true for E/K. 

Proof. Because E is potentially modular (see |66j . Thm. 1), there is a Galois 
totally real extension F/K over which E becomes modular. By Solomon's 
induction theorem, there are soluble subgroups Hi<G = Gal{F/K) and 
integers n^, such that the trivial character 1^ can be written as 

1g = ^nilndg^ iHi- 

i 

Write Ki for F^\ Since Gal(F/i^j) = Hi is soluble, a repeated applica- 
tion of Proposition 14.11 shows that E/Ki is modular. By Artin formalism 
for L-functions, 

L{E/K,s) = l[L{E/Ki,sr\ 

i 

On the other hand, writing X = Xp{E/F), for every H <G we have 
TkpE/K'' = dimA-^ = {X, 1h)h = (-^Jndg 1h)g- 

The first equality is (12. 2 p and the last one is Frobenius reciprocity. 
By assumption, the p-parity conjecture holds for E/Ki. Therefore 

i\E/K = (A',lG)G = 5^^n,rkp^/E:, 

= 7 niOids=iL(E/Ki,s) = oids=iL{E/K,s) mod 2. 

□ 

Remark 4.3. The proof also shows that L{E/K,s) has a meromorphic 
continuation to C, with the expected functional equation. This is the same 
argument as in [63], proof of Cor. 2.2. 

Theorem 4.4 ([121 US Let K be a totally real field, and E/K an 

elliptic curve with non-integral j -invariant. Then the p-parity conjecture 
holds for E/K for every prime p. 

Proof. Let p be a prime of K with ordp j{E) < 0. HE has additive reduction 
at p, it becomes multiplicative over some totally real quadratic extension 
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K{^/a), and the quadratic twist E^/K has multiplicative reduction at p as 
well. Because 

w{E/K{y/^)) = w{E/K)w{E^/K) and 
^ ' TkpE/K{y/a) = ikpE/K + xkpEo,/K, 

it suffices to prove the theorem for elliptic curves with a prime of multiplica- 
tive reduction. Since multiplicative reduction remains multiplicative in all 
extensions, by Proposition 14.21 we may also assume that E is modular. 

By Friedberg-Hoffstein's theorem [21] Thm. B, there is a quadratic ex- 
tension M = K{'\/]3) of K with a prescribed behaviour at a given finite set 
of primes of K, such that the quadratic twist Ep has analytic rank < 1. If 
we require that the multiplicative primes are unramified, then Ep also has a 
prime of multiplicative reduction. By Zhang's theorem ([67] Thm. A) that 
generalises the Gross-Zagier formula over the rationals, III^^/^ is finite and 
the Mordell-Weil rank of Ep /K agrees with its analytic rank; in particular, 
the p-parity conjecture holds for Ep/K. To prove it for E/K we just need 
to show it for E/M (cf. (j43]) ). 

Suppose p = 2. Fix an invariant differential u for E/K, and choose M so 
that all infinite places, all bad places for E, and ones where uj is not minimal 
are split in M/K. By ([2:20]l in 



rk, E/Kiy^) ^ ord. ^^/^(^)^^^/^ ^ Q ^od 2, 

(-^E/K 

since the other finite primes do not contribute to C. For the same reason 
w{E/M) = (±1)^ = 1; see ^ where this is spelled out in more detail, or 
apply Theorem 12.211 So the 2-parity holds for E/M, as required. 

Finally suppose p > 2. Then choose M so that (a) all bad places for 
E except one multiplicative place p are split, (b) p is inert, and (c) all 
real places are inert, i.e. M is totally complex. Let F^o/M/K be the p- 
adic anticyclotomic tower; thus F^o is the largest Galois extension of K 
containing M such that G = Gal{Foo/K) is of the form x C2 with C2 
acting by — 1 . The Artin representations of G are 1 and e that factor through 
Gal{M/K), plus two-dimensional ones of the form p = Ind^ x for non-trivial 
X : Zp — )• C^. Such a x factors through a dihedral extension F/K in Fqo, 
and by §2.51 we have 



G 

{1 + e + p, Xp{E/F)) = ordp — ^ = 1 mod 2, 

Ge/m 



where the last equality again uses the fact that all bad primes for E and all 
infinite primes split into pairs in M (and therefore in F as well), except for 
p which gives the '1'. For the same reason, we have 

w{E/K)w{E/K,e) = w{E/M,x) = -1- 

We already know the p-parity conjecture for i?^, 

W{E/K,e) = w{Ep/K) = (_l)o>-d2 rk^ E^/i^ ^ ^_^-^(e,X^{E/F)) ^ 
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SO to show the p-parity conjecture for the trivial twist, we just need to verify 
it for a single non-trivial x- Precisely such a character is provided by the 
anticyclotomic theory: a combination of Cornut-Vatsal's [7] Thm. 4.2 with 
Nekovaf's [40j Thm. 3.2 gives a x such that the x-component of Xp{E/ F) 
has multiplicity 1, which is an odd number, as required. □ 

Remark 4.6. The same idea lies behind the proof of the p-parity conjecture 
over Q, see [39] {p = 2) and [12] (odd p) for details. 



5. The 2-isogeny theorem 

Theorem 5.1. Let K he a number field and E/K an elliptic curve with 
E{K)[2] / 0. Then 

{-ly^^^/^ = w{E/K). 
In particular, finiteness of III implies the parity conjecture for E. 

The proof will occupy the whole of ^ 

Notation 5.2. Fix a 2-torsion point / P G E{K)[2\, and let (j) : E ^ E' 
be a 2-isogeny whose kernel is {0,P}. Furthermore, translate P to (0,0), 
so that E and E' become 

iEa,b =) E : y'^ = + ax^ + bx, a,b £ Ok , 
E' : y"^ = x^ - 2ax^ + 5x, (5 = - 46 , 

with (j) : E ^ E' given by 

: (x, y) I— )• (x + a + bx^^ ,y — bx^^y) . 

Notation 5.3. Denote 

1 I cokcr <pv I 1 I 1 ; I 

a^{E/K^) = {-If"^^ = (_l)l+ord2|coker</,„|^ 



where (pv is the induced map on local points (j)^ ■ E{Kv) — t- E'{Ky). (Note 
that ker = {O, (0, 0)} is always of size 2.) 

Strategy. Recall from Theorem 12.81 and the definition of the global root 
number 13.191 that 

(5.4) {-ly^-^^/^ = \{a^{E/K,)- \{w{E/K,) = w{E/K), 

V V 

so a natural strategy is to make a term-by-term comparison at all places. 
Write F = Ky for some completion of K. 

5.1. Complex places. Suppose F = C Because it is algebraically closed, 
(j)y : E{C) — )• £"(C) is surjective, that is | coker 0^,1 = 1. Thus, 

w{E/F) = -1 = a^E/F). 
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5.2. Real places. 

Suppose F = M.. It turns out, somewhat " 5-o(a -45) 

surprisingly, that w{E/R) and C70(£^/]R) 
may not be equal: w{E/F) = —1 as in the 
complex case but (py : £^(R) — )• £^'(M) is not 
always surjective. For varying a, 6 G M the 
picture is given on the right. 

To see this, consider the structure of the group of real components for E 
and E'; recall that the group of real points is connected if and only if the 
discriminant of the equation is negative: 

• If (-2a)2 - 4(5 = 166 < 0, then E'{R) '^S^,so is surjective. 

• If 6 > and (5 < then E{R) ^ and E'{R) ^ x Z/2Z, so (f)y 
is not surjective. 

• If 6,^ > 0, then E{M.) ^ x Z/2Z ^ E'{W). Here is surjective 
if and only if the points O, (0, 0) of ker lie on the same connected 

component. (If they arc on different components, the image of (j) is 
connected; otherwise, the identity component of E{R) maps 2-to-l 
to the identity component of E'{R), so the other component maps 
to the other component since deg(j) = 2.) So cp^ is surjective if and 
only if is the rightmost root of + ax^ + bx, and this is equivalent 
to a being positive. 

5.3. The correction term. To save our strategy, which seems to be some- 
what in ruins, we have to introduce a correction term that measures the 
difference between w{E/F) and a^{E/F). It should be trivial at complex 
places and depend on the signs of a, b and 5 at real places, so it is natural 
to consider something like 

{a,~b)F{-a,6)F 
where {x,y)p is the Hilbert symbol: 

Definition 5.5. Let be a local field of characteristic zero. For x,y £ F^ 
the Hilbert symbol {x,y)F = il is 

{X, y) = {X, F{vy)/F) = { ti: r"^ ''""^ ^^^^ ^' 

Recall that {x,y) is symmetric, bilinear as a map F^ x F^ — > {±1}, and 
satisfies {1 — x,x) = 1 for x j^O,l. In a field of residue characteristic 7^ 2 it 
is explicitly determined by 

F = C : {x,y) = 1 always; 

F = R: {x,y) = -1 4^ x,y < 0; 

F/Qp finite, p ^ 2: (unit, unit) = 1, 

(uniformiscr, non-square unit) = —1. 
The suggested correction term (a, — 6)ir(— a, 5) p is trivial at complex places 
and it is precisely set up to give the right signs at the real places. A few 
experiments suggest, that up to a missing factor of 2 in front of —a (invisible 
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over the reals), this is the right correction at all completions F = Ky, not 
just at infinite places. One technical problem is that the Hilbert symbols do 
not make sense when a = 0, but this is easy to fix: if \a\F is small, then 



{a,-b)p{-2a,a^ -4b)F = {a, -b)F{-2a,l - %)Fi-2a, -4b)F 



2 , 

(a, -b)Fi-2a, □)i.(a, -45)ir(-2, -46)^ 
{-2,-b)F, 



because elements of F close to 1 are squares. So we may state 

Conjecture 5.6. Let F be a local field of characteristic zero, and E/F an 
elliptic curve with a 2-isogeny (p : E ^ E' over F. In the notation of \5.S\ 



w{E/F) = a^E/F) • { 



-2-b)p, ifa=0. 



This conjecture together with ()5.4p implies Theorem 15.11 Indeed, if E as 
in 15.21 is now defined over a number field K, the product formula for the 
Hilbert symbol 



K, = l, for all x,yeK'' 

implies that the correction term disappears globally. 

Next, we prove the conjecture in a few cases. As we dealt with infinite 
places already, assume from now on that F = is non-Archimedean, i.e. 
a finite extension of Qp. Also we may deal with the annoying exceptional 
case a = 0: if we prove the conjecture in all cases when \a\F is small, then it 
holds when a = as well, because both the left- and the right-hand side in 
the conjecture are continuous functions of the coefficients a and b of E; we 
already proved this for the Hilbert symbols, and for C{E/ F,uj) and w{E/F) 
this is a general fact: 

Proposition 5.7. Suppose E/F an elliptic curve in Weierstrass form, 

E : + aixy + a^y = + 02^^ + a^x + ae, G F. 

There is an e > such that changing the ai to any a[ with \ai — a'j\F < 
€ does not change the conductor, minimal discriminant, Tamagawa num- 
ber, C{E, 2y+aix+a3 '^' ''^^^^ number of E and the Tate module TiE as a 
Gal{F / F) -module for any given I ^ p. 

Proof. The assertion for the conductor, minimal discriminant, Tamagawa 
number and C follows from Tate's algorithm ( |60j or [55] IV. 9). The claim 
for TiE is a result of Kisin ([29j p. 569), and the root number is a function 
of ViE = TiE Q;. Alternatively, that the root number is locally constant 
can be proved in a more elementary way: see Helfgott's |27j Prop. 4.2 when 
E has potentially good reduction; in the potentially multiplicative case it 
follows from Rohrlich's formula ([48] Thm. 2(ii)). □ 

So assume from now on that a ^ 0. Note also that our chosen model 
y2 = _j_ ^^2 _|_ -g ^j^ique up to transformations a 1— >■ u^a, b 1— )■ u^b for 
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u G . As these do not change the Hilbert symbols (a, —6), (—2a, — 46) 
and (—2, —6), we may and wih assume that the model is integral and minimal 
when t> I 2. Now we prove the conjecture in all cases when E is semistable 
with V \ 2; recall that ord2C^/i? = ord2 c(£'/-F) in this case, since the 
quotient C/c is a power of the residue characteristic. 

5.4. Good reduction at v \ 2. Here w{E/F) = 1, a^{E/F) = 1 and 
6, (5 G O^. If a E O^, then both the Hilbert symbols are (unit,unit), hence 
trivial. For a = mod mp, the expression —h5 = 46^ mod mp is a non- 
zero square mod m-i;', so the product of the Hilbert symbols is again trivial. 

5.5. Split multiplicative reduction at v \ 2. Write E/F as a Tate curve 

m §v.3) 

Eq:y^+xy = x^ + + a^iq), E{F) ^ F^'/q^, 

with q E mp of valuation v{q) = f(A). The coefficients have expansions 

a4{q) = -5s3{q), aQ{q) = — , Sk{q) = 2^ ^ _ , 

n>l ^ 

and they start 

a^(q) = -5q - 45^^ - UOq^ - 365g^ - 630^^ + 0{q^), 
aelq) = -q- 23q'^ - 154^3 _ 647^'' - 1876^^ + 0{q^) . 

The two-torsion, as a Galois set, is {1, —1, y^, —^/q}- For n 7^ 1 in this set, 
the corresponding point on E has coordinates 

^{'^^ Q) = (l-u)2 + J2 ( (l-g"M)2 + (l-g"«-l)2 ~ 2 ,^_^^„.2), 

n>l 

Yd, n) - .. + V r g''""'' .. -^ .. _L 1" \ 

n>l 

We now have two cases to consider: the 2-torsion point 1, q),Y{—l, q)) E 

Eg and (renaming ±y^ by q) the 2-torsion point {X{q,q'^),Y{q,q'^)) E -©^2. 
In both cases, we have c{E) / c{E') = 2^^ and w{E/F) = —1, so we need 

(5.8) {a,-b) {-2a,6) = 1 , 

where a, b, 6 are the invariants of the curve transformed back to the form 
15.21 with the 2-torsion point at (0,0). First of all. Eg has a model 

= x"^ + x^/4 + a4{q)x + aei^q) . 

Let r = —X{u,q), and write 04 = 04(9), as = ciQ^q). Then, after translation, 
the curve becomes 

E = x^ +ax'^ + bx, a = l/4-3r, 6 = 204 - r/2 + 3r^ 

Suppose we are in Case 1, so r = —X{—l,q). Then the substitution 

(5.9) X 4x - 2r + 1/2, y ^ 8y + Ax 
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transforms E' into the form 

: y"^ + xy = x"^ + {-bq^ + 0{q^))x + {-q^ + 0{q*)) . 

We use the notatfon 0{q^) to indicate a power series in q with coefficients 
in Op that begins with an,g" + .... In fact, E'^ = E^i but we will not need 
this; it is only important that it is again a Tate curve (in particular, this 
model is minimal). From the expansions 

r = 1/4 + 40(g), a = -1/2 + 40(g), 6 = 1/16 + 0(g), 

we have 

(a, -b) = (unit, unit) = 1, (-2a, <5) = (1 - 80(g), (^) = (□, 5) = 1 . 
Case 2 is similar: here 

a = 1/4 + 2 0(g), b = q + 0{q^), 5 = 1/16 + 0(g) , 
so a and 5 are squares in F, and both Hilbert symbols are therefore trivial. 

5.6. Nonsplit multiplicative reduction at v \2. Let r] G O^ be a non- 
square unit, so that F{ri)/F is the unramified quadratic extension of F. 
Consider the twist of E by rj, 

E : y'^ = x^ + ax^ + bx , 
^rj '■ y'^ = x^ + rjax^ + rj'^bx . 

It has split multiplicative reduction, so by ()5.8p 

{'qa,-rf'b){2r]a,rf{a^ - 46)) = 1. 

Now 

(r/a, -r/26) = (rya, -6) = (77, -6)(a, -6), 

(2r/a, r/2(a2 - 46)) = (2r/a, - 46) = (r/, - 46) (2a, a^ - 46), 

so comparing with the Hilbert symbols (a, —6) and (—2a, 6) we have an extra 
term 

(5.10) (r/, -6(a2 - 46)) = (7?, -b" /\{E') /IQ/:^{E)) = (r/, -A(£;')/A(i?)) . 

Because x is a norm from F{rf)^ to F^ if and only if v{x) is even, this 
Hilbert symbol is trivial precisely when v{/S.{E')) = v{A{E)) mod 2. From 
Tate's algorithm ([55j, IV.9.4, Step 2), 

r 1, 7;(A(ii;)) odd, fl, ^^(A(i?')) odd, 

~ \ 2, ?;(A(^)) even, > - \ 2, ^;(A(^')) even, 

so the correction term (j5.10p is trivial if and only c{E)/c{E') has even 2- 
valuation. This proves Conjecture 15.61 in the non-split multiplicative case, 
when V \2. 
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5.7. Deforming to totally real fields. There are several other reduction 
types, including all cases when v \ 2 and when E has good ordinary or 
multiplicative reduction at v\2, when Conjecture 15.61 can be shown to hold 
directly [11]. It would be satisfying to do this in the remaining cases as well: 

Problem 5.11. //-F/Q2 is finite, and E/F has good supersingular or ad- 
ditive reduction, prove Conjecture 15.61 directly. 

Having tried and failed to do this, we will complete the proof of Conjecture 
15.61 and of Theorem 15.11 by a global argument. The idea is that if E/K is 
an elliptic curve over a number field and the conjecture holds for it at all 
primes but one, the conjecture at the remaining prime is equivalent to the 
2-parity conjecture for E. But there is a large supply of elliptic curves E, 
namely those defined over totally real fields with non-integral j-invariants, 
for which we know the 2-parity conjecture. There are more than enough of 
these to approximate any given elliptic curve over F. 

Assumption 5.12. From now on F/Q2 is finite, a,b £ F satisfy b ^ 0,a^ — 
46 7^ 0, and Ea^b is an elliptic curve as in \5.^ 

Ea,b : = + ax^ + bx. 

Lemma 5.13. There exists a totally real field K with a unique place vq\2, 
and d,b £ K such that 

(1) K,, - F. 

(2) Under this identification, \a — d\vQ and \b — b\vg are so small that all 
terms in Coniecture \5.6\ are the same for Ea,b/F and for E~ i/K^^ . 

(3) E^ ^ is semistable at all primes v ^ vq of K and has non-integral 
j -invariant. 

Proof (1) Say F = Q2N/(/) with monic / G Q2N. If / G Q[x] is monic 
and 2-adically close enough to /, it defines the same extension of Q2 by Kras- 
ner's lemma. Now pick such an / which is also R-close to any polynomial 
in M[x] whose roots are real (weak approximation), and set K = Q[x]/(/) 
and vq to be the prime above 2 in K. 

(2) Next, provided d,b £ K are close enough to a, b at vq, the continuity 
of the Hilbert symbol (and the computation preceding Conjecture 15. 6p and 
Proposition 15.71 implv that (2) holds. 

(3) As Vq is the unique prime above 2, it suffices to guarantee that E^ 1^ is 
semistable at primes v \ 2 oi K and has j{E) Ok- The curve has standard 
invariants 

C4 = 16(a2 - 36), C6 = -32a(2a2 - 96), A = 1662(0^ - 46). 

Pick any non-zero d G Ok which is close to a sA vq. Next, choose any 6 G Ok 
which is close to 6 at vq and close to 1 at all primes v ^ vq that divide d. 
Then either A or C4 is a unit at every prime v ^ vq, and this ensures that 
E is semistable outside vq ([54] Prop. VII. 5.1). If, in addition, we force 6 to 
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be divisible by at least one prime p f 2 (weak approxmation all the time), 
this guarantees that j{E) is non- integral at p. □ 

Claim. Conjecture 15.61 is true. 

Proof. First we finish off the case when F has residue characteristic 2. Let 
F/Q2 and Ea^b be as above, and K and £' = £'- ^ as in the lemma. We want 
to show that Conjecture 15.61 holds for Ea^b/F-, equivalently for E/K^^. 

Because K has a unique prime vq above 2, and E is semistable at all other 
primes. Conjecture 15.61 holds for E/K^ for all v ^ vq. In view of ()5.4p . the 
conjecture at vq is equivalent to the 2-parity conjecture for E/K. But E 
has non-integral j-invariant and K is totally real, so the latter holds. 

Finally, suppose F has odd residue characteristic p, and E/F has additive 
reduction. Exactly as in Lemma [5. 131 find a totally real field K with a place 
vq\p and E/K which is UQ-adically close to E, and semistable at all v ^ vq. 
Again, the 2-parity conjecture for E/K together with Conjecture 15.61 at all 
V ^ Vq (now including v\2) proves Conjecture 15.61 at vq as well. □ 

As explained above, reversing the argument yet again proves Theorem 1 5. II 
6. The p-isogeny conjecture 

What is the analogue of the results of the previous section for an isogeny 
whose degree is an odd prime pi Let (j) : E ^ E' he such an isogeny, with 
E, E' and (p all defined over K. Again, write 

, I coker tjiy | 

a^{E/K,) = (-1)°'''^ lkc.0.| , 



so that by Theorem 12.81 

(6.1) i-iy^"'^/'' = lla^{E/K,y, l[w{E/K,) = w{E/K). 

V V 

Again, let us make a term-by-term comparison at all places. Fix a place v 
of K. The difference between w{E/Ky) and a^{E/Ky) is suggested by the 
root number computation of Theorem 13.251 and we formulate the following 

Conjecture 6.2. Let fC he a local field of characteristic zero, and E/K, an 
elliptic curve with a p-isogeny (f) : E ^ E' over IC. Write J- = /C(ker(/>). 
Then 

w{E/lC)=a^{E/lC) {-1,F/1C). 

If this conjecture is true, applying it for E/K at completions and taking 
the product over all places, we get the p-parity conjecture for E/K. Let us 
verify that the conjecture holds in most situations: 

If /C = C then | ker^| = p, \ cdkei = 1, w{E/lC) = —1 and F = K., so 
the formula holds. The same is true if /C = M and the points in ker(/> are 
real. 

If /C = M and the points in kerc/; are not defined over M, then then 
I ker (/)| = 1, I coker (t)\ = p and J-" = C, so the correction term (— 1, C/M) = — 1 
compensates for the kernel, and the formula holds again. 



34 



TIM DOKCHITSER 



Suppose /C is a finite extension of Qi for / ^ p. The standard exact 
sequences for ^o(/C) C S(/C) and Ei{fC) C Eo{lC) ([54] Ch. VII) show that 

where c is the local Tamagawa number. (Use that E and E' have the same 
reduction type and the same number of points over the residue field, and 
that [p] is an isomorphism on the formal groups when p ^ I.) Now we have 
a few cases: 

If E/IC has good reduction, then lC{E\p\)/IC is unramified by the Neron- 
Ogg-Shafarevich criterion, in particular J^//C is unramified as well. So all 
units are norms in this extension by class field theory, in particular —1 is. 
The Tamagawa numbers are trivial as well, so all terms in the conjecture 
are 1. 

If E/IC has multiplicative reduction, then J^/IC is still unramified, since 
the inertia in IC{E\p])/lC is pvo-p in the multiplicative case and : /C]|(p— 1) 
is coprime to p; so the Artin symbol is still 1. Now w{E/K,) = —1 as opposed 
to the the good case, but also the quotient ^(^^//^-^ is either p or 1/p (same 
argument as in §5.51 for p = 2), and the conjecture holds. 

If E/IC has additive reduction and p,l are at least 5, then the Tama- 
gawa numbers have order < 4, coprime to p. So the conjecture claims that 
w{E/K) = (— 1,J^//C), and this is precisely what we proved in Theorem 
I3.25j in fact, it is this computation that suggests the correction term in the 
conjecture. 

When p = I, the problem becomes trickier. It is still manageable when 
E/IC is semistable, by a careful analysis of cr,^ which also involves the action 
of (j) on the formal groups (see [H]). For p = 3 the whole conjecture can 
be settled by a deformation argument, exactly as we did for p = 2 (see jl6j: 
presumably the argument there also works when p = 5 and 7, when Xq(p) 
still has genus 0). The remaining problem is 

Problem 6.3. Prove Conjecture \6.2\ when p > 7, the field IC has residue 
characteristic p and E/IC has additive reduction. 

Coates, Fukaya, Kato and Sujatha [6j have proved this conjecture when 
E/IC acquires semistable reduction after an abelian extension of IC, with a 
'tour de force' computation with crystalline cohomology. Moreover, they 
proved it for arbitrary principally polarised abelian varieties; p-isogeny has 
to be replaced by a p^-isogeny with a totally isotropic kernel. It would be 
very interesting to find at least a conjectural generalisation for p = 2: 

Problem 6.4. Suppose IC is a local field of characteristic 0, and (p : A ^ 
A' is an isogeny of principally polarised abelian varieties over K such that 
= [2] (up to isomorphisms given by the polarisations). Find a relation 
between a (f){A/IC) and w{A/IC). 

This would have important parity implications for abelian varieties. We 
also mention here that Trihan and Wuthrich [64] have proved an analogue 
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of Conjecture 16.21 over function fields of characteristic p, when </> is the dual 
of the Frobenius isogeny. Because this isogeny exists for elliptic curve over 
a function field, they thus proved the p-parity conjecture in characteristic p. 

Finally, returning to Conjecture 16.21 itself, it would also be very interesting 
to see whether it can be settled by a deformation argument, like we did it 
for p = 2. The problem is that because Xq{p) has positive genus for large 
p, it is unclear how to deform elliptic curves with a p-isogeny while keeping 
control over other places of the resulting totally real field. It is known how 
to construct points of essentially arbitrary varieties over totally real fields 
(see e.g. [M]), but it is not clear whether these results are sufficient in this 
case. 



7. Local compatibility in S's-extensions 

To complete the proof of Theorem lAl it remains to settle the second equal- 
ity in Theorem 1 2. 6 1 Thus, suppose E/K is an elliptic curve, F/K is a Galois 
S's-extension and M/K and L/K are the quadratic and cubic intermediate 
extensions. We want to show that 



2 

E / E / K 



orda — — 1 



(tgij w{E/K)w{E/M)w{E/L) = (-1) c^,,,c^,^ 

Both sides are products of local terms, and, as in the isogeny case, we want 
to compare the contributions above each place of K. 

Fix such a place v of and denote by wk, wm, wl and wp the product 
of the local root numbers of E over the places of M, L and F above v. 
Fix also an invariant differential uj for E/K and write Ck, Cm etc. for the 
product of the modified local Tamagawa numbers of E over the places of K, 
M etc., computed using to (see end of Notation II. ip . We need to show the 
following local statement: 2 

(tloc) WKWMWL = (-1) '^^^''i . 

Lemma 7.1. If there is more than one place above v in F or E has good 
reduction at v then holds. 



Proof. It is easy to see that for v\oo both the left-hand side and the right- 
hand side are triviaH, so suppose u is a finite place. Then the right-hand 
side is the same as ordp{CF/CM) rnod 2. Now consider the following cases. 

Case 1: v splits in M/K. (In particular, this must happen if F/M is inert 
above v.) As the number of primes above u in M is even, Cp and Cm are 
both squares, and wm = 1- Since in this case L^/Ky is Galois of odd degree, 
wl = Wk by Kramer-Tunnell [31], proof of Prop. 3.4. 

Case 2: the prime above v in M splits in F/M. Then Cp = Cm^, so 
Cf/Cm is a square. Under the action of the decomposition group Dy at 
V, the G-sets G/Gal(F/L) and (G/ Gal(F/M)) U (G/G) are isomorphic. So 
the number of primes above v with a given ramification and inertial degree 



^This is true in any Brauer relation, see e.g [14] Proof of Cor. 3.4 
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is the same in L as in M plus in K. It follows that the local root numbers 
cancel, wkwmwl = 1- 

Case 3: F/M is ramified above v and E is semistable at v. The con- 
tributions from Lo cancel modulo squares, and wk = wl. If has split 
multiplicative reduction over a prime of M above v, this prime contributes 
p to Cf/Cm and —1 to the root number. If the reduction is either good or 
non-split, it contributes to neither. □ 



Proposition 7.2. The formula (jf^ holds in all cases. 

Proof. The only case not covered by the lemma above is when E/K has 
additive reduction at v and F/K has a unique prime v above v. We will use 
a continuity argument to settle this case. 

Pick an S'3-extension T /fC of totally real number fields with completions 
ICw = and Fw = Fy for some prime wlw in F/IC (same argument as 
in Proposition 15. 7p . Choose an elliptic curve £/IC which is close enough 
if-adically to E/K^, with semistable reduction at all places 7^ w where F/K. 
is ramified and at least one prime of multiplicative reduction. By 'close 



enough' we mean that the left- and the right-hand sides of ( fioc ) are the 
same for E/Ky and S/JC^ (Proposition 15. 7p . 

By the 3-parity conjecture for £ over the intermediate fields of F/K. (The- 



orem S3]) and Theorem 12.91 we find that (fgio) holds. Since the terms in it 
agree at all places except possible w by Lemma |7.H they must agree at w 
as well. This proves dfipcD for S/K^ and hence for E/K^ as well. □ 

This completes the proof of Theorem El 

8. Parity predictions 

The purpose of this final section is to collect some peculiar predictions of 
the parity conjecture concerning ranks of elliptic curves over number fields. 

Definition 8.1. Write -ff(|) = max(|p|,|g|) for the usual 'naive height' of 
a rational number. We say that a subset S" C Q has density d if 

#{a<^S\H{a)<X] _ 
x^oo #{a £q\H{a) < X} 
There is a folklore 'minimalistic conjecture': 

Conjecture 8.2. Let E/Q{t) be an elliptic curve of Mordell-Weil rank r. 
For a G Q write Ea for its specialisation 1 1— )• a. Then 

v, tf w{Ea/Q) = i-iy 

r + 1, otherwise 
for a set of rational numbers a of density 1. 

Note that Ea is indeed an elliptic curve for all but finitely many o, so the 
conjecture makes sense. What is says is that generically, the rank of a fiber 
is a sum of the 'geometric' contribution from the points in the family plus 
an 'arithmetic' contribution from the root number. 



rk^;. 
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8.1. Semistable curves in cubic extensions. The simplest elliptic curves 
are semistable ones, and their root numbers are particularly nice: 

Definition 8.3. An elliptic curve over E/K is semistable if it has good or 
multiplicative reduction at all primes of K. 

Because places of good and non-split multiplicative reduction do not con- 
tribute to the global root number, and infinite and split multiplicative places 
contribute —1, for semistable E/K, 

w{E/K) = ( — l)#i''l°^J'( — '^P''* multiplicative for E} 

Thus, the parity conjecture implies 

Conjecture 8.4. If E/Q is semistable, then 

rk£^/Q = 1 -|- ^{primes p where E has split mult, red.} mod 2. 

Example 8.5 ([18]). Take E = 19^3 over Q, 

E -.y^ +y = x'^ + +x, A = 19, split mult, at 19. 

Two-descent shows that its rank over Q is (in accordance with the predic- 
tion that it is even). 

Now take Km = Q.{\/rn) for some cube-free integer m > 1. Then the 
conjecture asserts that 

r}.E/Km^2 + {?:l^Se^°^- =1 mod 2. 

#{i>|oo} #{i'|19} 

So ikE/Km should always be odd, in particular positive. We get the fol- 
lowing surprising statement: 

Conjecture 8.6. For every m > 1, not a cube, the equation + y = 
+ + X has infinitely many solutions in Q(-y/m). 

It is known that an elliptic curve over Q acquires rank over infinitely many 
fields of the form Q(-y/m) ([9] Thm. 1), but the full conjecture appears to 
be completely unapproachable at the moment. 

8.2. Number fields K such that w{E/K) = 1 for all E/Q. 

Let K = Q(V— 1, \/l7). This field has a peculiar property that every place 
of Q splits into an even number of places in it (2 or 4): 

• K has 2 (complex) places v\oo. 

• 2 splits in Q(\/T7), and thus in K as well. 

• 17 splits in Q(-v/— 1), and thus in K as well. 

• Primes p ^ 2, 17 are unramified in K/Q, so their decomposition 
groups are cyclic. Dp ^ Gal(i^/Q) = 6*2 x C2; so such p split as well. 

Thus, for any elliptic curve E/Q, 

w{E/K) =llw{E/K,) = ll{±ir^^ = +1, 
p p 

and we get 
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Conjecture 8.7. Every elliptic curve E/Q has even rank over Q{\/—1, \/T7). 

The existence of such number fields was pointed out to us by Rubin. 
Note also that the same conjecture may be stated for abelian varieties. As 
an exercise, we leave it to the reader to use the same ideas to show that the 
parity conjecture implies the following: 

Conjecture 8.8. Every elliptic curve over Q with split multiplicative re- 
duction at 2 has infinitely many rational points over QiCs)- 

8.3. Goldfeld's conjecture over Q. 

Definition 8.9. For an elliptic curve 

E/Q: y^ = f{x) 

and a (usually square-free) integer d, the quadratic twist oi E hy d is 

Ed/Q: dy^ = f{x). 



Note that E = E^ over Q{Vd), but not over Q. Now, if do < is such 
that all primes p\2Ae split in Q(\/(io)i then it is easy to see that 

w{Eddo/Q) = —^{Ed/Q) for all square- free d. 

In other words, the involution d o ddo on Q^/Q^^ changes the sign of 
w{Ed). So 

w{Ed/Q) = +1 for 50% square-free d's, 

w{Ed/Q) = —1 for 50% square-free d's, 
meaning that 

#{ Idl < X square-free {wjEd/Q) = 1 } ^ 1 

(o-lU) ,, , , „ — ^ y - as A — oo. 

^ ^ #{\d\<X square-free } 2 

The 'minimalistic conjecture' above becomes a famous conjecture of Gold- 
feld: 

Conjecture 8.11 (Goldfeld). Let E/Q be an elliptic curve. Then 
rkEd/Q = for 50% square- free d's, 
rkEd/Q = 1 for 50% square- free d's, 
rkEd/Q ^ 2 for 0% square- free d's. 

Note that '0%' does not exclude the possibility of E having infinitely many 
quadratic twists of rank > 2. It only says that 

r>2(X) := #{ \d\ < X square-free | ikEd/Q > 2 } 

is o{X) (the denominator in (IS.lOp is ~ X/C,{2) for large X). In fact, it is 
known that 

r=o{X) > X/logX (Ono-Skinner [44]) 

r=ilx) > X^-' (Pomykala-Perelh [45]) 

r>2{X) > CeX^I^/\o^X (Stewart-Top [56J). 
For some specific elliptic curves it is known that r=o(^) ~ CX and r=i(X) ~ 
C'X, but to get C or C" to be \ seems to be extremely hard. 
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8.4. No Goldfeld over number fields. Over number fields Goldfeld's 
Conjecture has to be formulated differently, because the 'tt? = +1 in 50% 
cases'-formula (IS.lOp may not hold. The simplest counterexample is CM 
curves: 

Example 8.12. Let K = Q{i) and E/K :y^ = x^ + x. This is a curve with 
complex multiplication, 

EndKE^Z[i], [i]{x,y) = i-x,iy). 

The set of rational points E{K) is naturally a Z[z]-module, and so is E{F) 
for any extension F/K. Because E{F) ®% Q is a Q(i)-vector space, it is 
even-dimensional over Q, so ikE/F is even for every F D K. Hence 

ikEd/K = r:kE/K{Vd) -rkE/K = mod 2, all d £ K"" / K'''^ , 

in other words every quadratic twist of E/K has even rank. It is also not 
hard to prove that w{E(i/K) = 1 for all d, as expected. 

The same applies to any CM curve E/K with endomorphisms defined 
over K. Such a is automatically totally complex (it contains End IT as 
a subring), the representation Gk — >• AutT^E' has abelian image, and E 
acquires everywhere good reduction after an abelian extension of K. In- 
terestingly, these are precisely the local conditions on an elliptic curve to 
guarantee that all of its quadratic twists have the same root number: 

Theorem 8.13 ([10]). Let E/K he an elliptic curve. Then w{Ed/K) = 
w{E/K) for all d E K^ if and only if 

(a) K is totally complex, and 

(b) For all primes p of K the curve E/Ky acquires good reduction after 
an abelian extension of K^. 

For semistable curves the second condition simply says that E must have 
everywhere good reduction. It is not hard to construct explicit examples: 

Example 8.14. The elliptic curve E/Q : = + fx^ - 2x - 7 (121C1) 
has minimal discriminant 11^ and acquires everywhere good reduction over, 
e.g., Q(v^). If we take for instance K = QiCs, v^^T), it is totally complex, 
E/K has everywhere good reduction, so 

w{Ed/K) = w{E/K) = = _i, for all d e K^. 

The parity conjecture implies that every quadratic twist of E/K has positive 
rank, or, equivalently, that the rank of E must grow in every quadratic 
extension of K. 

Conjecture 8.15. The curve 121C1 over K = Q(C3, v^) and all of its 

quadratic twists over K have positive rank. 

Here is a very elementary way to phrase this: 

Conjecture 8.16. Over K = ^^{C,^, ^/Vi) the polynomial x^ + jx'^ — 2x — 7 € 
K[x] takes every value in K^ / K^"^ . 
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8.5. No local expression for the rank. The reader may have noticed that 
the above examples rely not so much on the precise formulae for the root 
numbers but mostly just on their existence. In other words, they explore 
the fact that (conjecturally) the parity of the Mordell-Weil rank is a 'sum 
of local invariants': 

Definition 8.17. Say that the Mordell-Weil rank (resp. Mordell-Weil rank 
modulo n) is a sum of local invariants if there is a Z- valued function (k, E) i— )• 
A{E/k) of elliptic curves over local fieldfS, such that for any elliptic curve 
E over any number field K, 

rkE/K = ^X{E/Ky) (resp. rkE/K = ^X{E/Ky) mod n), 

V V 

the sum taken over all places of K (and implicitly finite). 

The parity conjecture implies that the Mordell-Weil rank modulo 2 is a 
sum of local invariants, namely those defined by the local root numbers. 

One might ask whether there is a local expression like this for the rank 
modulo 3 or modulo 4, or even for the rank itself. The answer is 'no': 

Theorem 8.18 ([17J). The Mordell-Weil rank is not a sum of local invari- 
ants. In fact, a stronger statement holds: forn G {3,4,5} the Mordell-Weil 
rank modulo n is not a sum of local invariants. 

Proof. Take E/Q : = x{x -\- 2){x — 3), which is 480al in Cremona's 
notation. Writing (^p for a primitive pth. root of unity, let 



En 



the degree 9 subfield of Q(Ci35 Cios) if n = 3, 
the degree 25 subfield of Q(Cii, C241) if n = 5, 
Q(^/^, V4l, ^/73) if n = 4. 

Because 13 and 103 are cubes modulo one another, and all other primes 
are unramified in F3, every place of Q splits into 3 or 9 in i<3. Similarly in 
F4 (resp. F5) every place of Q splits into a multiple of 4 (resp. 5) places. 
Hence, if the Mordell-Weil rank modulo n were a sum of local invariants, it 
would be G Z/nZ for E/Fn. 

However, 2-descent shows that ikE/F^ = rk E/F^ = 1 and rk E/F4 = 6 
(e.g. using Magma over all minimal non-trivial subfields of □ 

Remark 8.19. It is interesting to note that the L-series of the curve E = 
480al used in the proof over F = F4 = Q{^/^, y/il, \/73) is formally a 4th 
power, in the sense that each Euler factor is: 

L{E/F,s) = 1- ( i_3-2s )^ ( i_l-2s)'^{ i+i4.7-L+7i-4. )^( i+6-ll-2=+ll2-40'^-" 



^Meaning that if fc = fc' and E/k and E' /k' are isomorphic elliptic curves (identifying 
k with k'), then A{E/k) = A{E'/k'). 
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However, it is not a 4tli power of an entire function, as it vanishes to or- 
der 6 at s = 1. (Actually, it is not even a square of an entire function: a 
computation shows it has a simple zero at 1 + 2.1565479... i.) 

In fact, by construction of F, for any E/Q the L-series L{E/F,s) is 
formally a 4th power and vanishes to even order at s = 1 by the functional 
equation. Its square root has analytic continuation to a domain including 
Res > |, Res < ^ and the real axis, and satisfies a functional equation 
s -H- 2 — s, but it is not clear whether it has any arithmetic meaning. 
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